File HF-04
Where the work happens.
Child care software gets this wrong in two directions: a HIPAA badge on a product that has not earned one, or a European database quietly holding American children's files. Honeyfold does neither.
- Website functions
- Columbus, Ohio, Netlify region CMH
- Public pages
- Cached on a global CDN. They do not contain children's records.
- Demo requests
- Netlify Forms. We do not run advertising pixels on this site.
- Center records
- Hosted in the United States when an account is open. Not on the European Kitaversum database.
- Company
- L3D1 Solutions GmbH, Augsburg, Germany, operating the Honeyfold brand.
What "hosted in the Midwest" means here
Netlify's default compute region for a new site is CMH, Columbus, Ohio. Honeyfold also pins its functions to CMH, so a later setting change does not move that work to Europe. On plans that honor a region pin, the pin is CMH. The public pages are still cached close to the reader, which is what you want for a director opening the site between drop-off and the first diaper.
Caching a public page is not the same thing as storing a child. The pages you can read without an account have no enrollment lists on them.
Access
A teacher sees the rooms they work. A director sees the building. An owner of several licenses sees those licenses as separate files. A parent sees their own child. That is the model. A shared tablet password for "the preschool iPad" is how records leak, and we will say so on a walkthrough if that is the plan.
HIPAA, said plainly
Most child care centers are not HIPAA covered entities. Handling an immunization record does not, by itself, make a center one. Honeyfold is built for the records programs keep: allergies, medications, incidents, immunizations, pickup, attendance. We do not display a HIPAA certification we have not earned.
If your program is a covered entity, or a business associate of one, tell us before you sign. We would rather decline the fit than rent you a logo.
Children's information
This website does not collect information from children, and it does not collect information about a particular child. The product, when a center uses it, stores information the center and the family entered about the child. We do not sell that information. We do not advertise to children.
The full notice is on the privacy page. The "do not sell or share" request is its own page, which is the wording US state privacy laws expect even when the answer is that we do not sell.
Leaving
Export the records. Close the account. We do not keep a silent copy as a sales lead. Backups follow the retention we state in the agreement you sign, not a vague forever.